Reference

How mcwaff Handles Your Personal Data

When you open an account with us — whether you deposit via bKash, Nagad or Rocket, or simply browse the lobby — we collect certain personal data to keep your account running and your wallet secure.

Account data kept securebKash, Nagad, Rocket payment contextYour rights, clearly statedContact us to request changesApplies to eligible Bangladesh regions
mcwaff How mcwaff Handles Your Personal Data
HOW WE PROTECT IT

Data Handling, Cookies and Account Security

We apply encryption across your account session and payment interactions. When you log in on a new device, an OTP is sent to your registered mobile number before access is granted — this applies whether you are on Android, iOS or a desktop browser. Cookies on our site are used for session management and lobby personalisation; you can adjust cookie preferences through your browser settings, though some features may not work fully if certain cookies are disabled.

Encryption in Transit All data passing between your device and our servers — including bKash and Nagad payment references — is encrypted using SSL so it cannot be read in transit.
OTP Login Verification Each new device login triggers a one-time password sent to your registered mobile. This means only you can authorise access, even if your password is compromised.
Cookie Controls We use session cookies to keep your lobby state and wallet preferences intact across pages. You can manage or clear these in your browser without losing your account data.
Data Retention Policy Active account data is retained while your account is open. On account closure, identifiable personal data is removed except where applicable rules require a retention period.
REACH US DIRECTLY

Contact Us About Your Privacy

If you want to access, correct or remove personal data we hold, reach our support team through any of the channels below. For account-linked requests — such as updating your registered mobile number or removing a stored bKash wallet reference — include your account username so we can verify your identity before making any change.

Live Chat Open the chat widget from inside your account. Fastest path for quick data queries or wallet reference removal requests during supported hours.
Email Support Send your data request to our support address. Include your username and the specific data you want accessed, corrected or deleted. We aim to respond promptly.
Account Settings Some personal details — like your display name or notification preferences — can be updated directly inside account settings without contacting support.

Your Privacy Questions, Answered

Below are the questions we hear most often about how personal data works on this platform. If your question is not covered here, our support team can help through live chat or email.

We collect your name, email address, mobile number and date of birth at registration. Payment interactions via bKash, Nagad or Rocket add a transaction reference to your account record.

No. We record only the transaction reference and wallet identifier needed to verify your deposit or withdrawal. Your mobile banking PIN is never seen or stored by us at any point.

Yes. Contact support via live chat or email with your username. We will compile the personal data linked to your account and send it through a secure channel within a reasonable timeframe.

Send a deletion request to our support team by email or live chat. Include your account username. We will remove identifiable data after verifying your identity, except where retention rules apply.

We do not sell your data. Third-party services we use for payment processing or platform security handle your data strictly as we direct and are not permitted to use it for their own purposes.

Cookies keep your session active and remember lobby preferences. You can disable non-essential cookies in your browser settings, though some account features may behave differently without them.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.